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REMARKS 

A replacement sheet for Figure 1 adding the prior art legend has been supplied 
herewith. 

The Examiner rejected claims 1,2 and 7-10 under 35 USC 102(e) as anticipated by US 
patent 6,453,353 to Win et al, and claims 5-6 have been rejected under 35 USC 103 as 
obvious from US patent 6,453,353 to Win et al . In response to the prior art rejection, claims 
1-10 have not been amended and a new claim 1 1 has been added. New claim 1 1 is directed 
to a firewall having a wireless communication device connected to it. 
The Win Reference 

Win discloses a method for a secure user access to authorized web resources, 
based on the user's role in the organization that controls the web resources. The information 
is maintained in a protected server and the access is provided by an access server. The 
access server 106 is connected by a secure communication link to a registry server 108, 
which manages access to administrative information about user, resources and roles of the 
users. The administrative information is managed by an Administrative Application 
incorporated in an administrator work station 700 shown in figure 7. Administrators use a 
standard web browser 100 to invoke the Administration Application (col. 12, lines 61-64). 
Using the Administration Application 1 14, an administrator may find, list, create, delete and 
modify user, resource and role records. Different administrators may be authorized to use 
different administrative functions on different administration privilege levels, as described in 
column 16, lines 3-45. Different administrators may be authorized to use different 
administrative functions on different administrations privilege levels, as described in Col. 16, 
lines 3-45. 

Claims 1 , 2 and 7-10 were rejected as anticipated by Win. Claim 1 calls for a limited 
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management user interface which Win does not teach, so claim 1 is not anticipated. 

Claim 2 depends from claim 1 , so it also contains an element not found in Win and is 
not anticipated. 

Claim 7 depends from claim 1 , so it also contains the limited management interface not 
found in Win and is not anticipated. 

Claim 8 depends from claim 1 , so it also contains the limited management interface not 
found in Win and is not anticipated. 

Claim 9 depends from claim 1, so it also contains the limited management interface not 
found in Win and is not anticipated. 

Claim 10 depends from claim 1, so it also contains the limited management interface 
not found in Win and is not anticipated. 

Claims 5 and 6 were rejected as obvious over Win et al. in light of the Examiner's 
official notice that it is well known in the art to use WAP and SMS wireless protocols in 
wireless communications. The Examiner admits that Win does not teach the use of wireless 
protocols in communications. The applicant's argue that there would have been no motivation 
for a person skilled in the art to provide the access server with a wireless limited 
management user interface. 

The Difference Between The Claimed Invention and Win 

This prior art approach is different from the present invention as claimed. In the 
approach according to Win, there is only one management interface to the access server, 
namely from the administrative work station 700 through the registry server. A number of 
administrators may have an access to the administration work station and the administration 
application. 

According to the present invention, the network security application itself, such as an 
access server or firewall has a full management user interface, such as the administration 
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application according to Win, and further a limited management user interface for conducting 
a limited number of management operations of the full management system for a network 
security application over a wireless remote connection. 

The problem addressed by the claimed invention is one of immediacy of response 
when an alarm message is sent to a system administrator. The problem is that unless a ^ 
system administrator is sitting at the management system interface computer at all times, 
when something goes wrong and an alarm message is sent, the administrator cannot fix the 
problem immediately upon receiving the alarm message unless he or she happens to be 
sitting at the management system interface computer. When the alarm message is sent out, it 
is usually sent out wirelessly via a short message service message to a predetermined 
mobile phone so that somebody does not have to be sitting at the management user interface 
computer at all time.. After receiving the message. however, the administrator must still make 
his or her way back to the location of the network management user interface computer so 
as to use the management user interface tools displayed there to troubleshoot and fix the 
problem. This almost always requires human intervention because the alarm is only a short 
message indicating something is wrong but not saying what. The tools of the management 
interface must be used to find out what is wrong and fix the problem, but there is a delay 
while the administrator makes his or her way back to the management system computer. 

The invention solves this problem by providing a limited management system user 
interface which is available to the system administrator wirelessly. This allows the system 
administrator to receive alarm messages wirelessly and troubleshoot the problem and 
possibly fix the problem immediately using the limited management system and the wireless 
connection. 

Win fails to teach such wireless limited management user interface to the access 
server in addition to the full management user interface. Further, Win fails to recognize the 
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problem recognized by the inventors of the invention of the claims at bar, so it is hardly fair to 
argue that Win et al. render the claimed solution obvious. Win is all about making it easier to 
add users to a system for controlling access to one or more Web resources stored on a Web 
server. The needs mentioned by Win et al are: 

1) a need for a mechanism to govern access to one or more information resources; 

2) a need for such a mechanism to to be equally adaptable to an internal network 
environment or to an external network environment; 

3) a mechanism that is easy to configure and re-configure as new users and resources 
become part of the system; 

4) a mechanism that is easy to administer; 

5) a mechanism that blocks access to, or does not display to the user, those applications 
which the user does not have rights to access; and 

6) a mechanism that is flexible, adaptable, additive data model that permist rapid and 
convenient addition of information describing users and resources, and that automatically 
propagates the effects of changes in the data model throughout the system. 

Note, that none of these needs includes a need for wireless access to the 
management system interface or wireless provision of a limited management system 
interface provided wirelessly. One skilled in the art would not perceive a suggestion to add 
these elements to this reference as the reference mentions no need for a wireless limited 
management interface to immediately troubleshoot and fix problems as soon as an alarm 
message is sent. 

Since no suggestion exists to modify Win et al. along the lines of the claimed 
invention, applicants argue the claimed invention is not obvious from Win et al. 

Since claims 1 and 10 are patentable over Win et al., their dependent claims 2-9 are 
also patentable. Therefore, there is no need to comment on the other references US patent 
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5,978,850 (Ramachadran et al.) and US patent 6,253,21 1 (Gillies et al.) Ramacliadran et al. 
discloses a field bus system for distributed control in process control environments. Gillies et 
al. discloses a method for distributing information in a distributed data base system. Thus, 
none of these documents is relevant to the present invention. 



Re spectfully submitted, 
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Ronald Craig Fish 
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Tel 408 778 3624 
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IN THE DRAWINGS 

Enclosed is a replacement sheet formal drawing of Figure 1 and a markup to 
show the changes made over the drawing of Figure 1 in the parent case. The 
Replacement Sheet for Figure 1 adds the prior art legend to Figure 1 . 
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